tree c1482ba0d2e2c5910abdb56cdd1dee40f01e6c5b
parent 5f0f5142151a1b9cce310698260af7e86fd04b30
author Monty Taylor <mordred@inaugust.com> 1486137435 -0600
committer James E. Blair <jeblair@redhat.com> 1487203960 -0800

Add action plugins to restrict untrusted execution

There are actions undertaken by action plugins in normal ansible that
allow for executing code on the host that ansible is executing on. We do
not want to allow that for untrusted code, so add a set of action
plugins that override the upstream ones and simply return errors.

Additionally, we can trap for attempts to execute local commands in the
normal action plugin by looking at remote_addr, connection and
delegate_to.

Change-Id: I57dbe5648a9dc6ec9147c8698ad46c4fa1326e5a